# Top

**URL:** https://discuss.elastic.co/top.md?page=875&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 876

---

## [Spark uses one ES node at a time to write to elastic search](https://discuss.elastic.co/t/spark-uses-one-es-node-at-a-time-to-write-to-elastic-search/102740)

<div class="topic-metadata">

**Author:** [@Saravanan\_Balakrishn](https://discuss.elastic.co/u/Saravanan_Balakrishn)\
**Replies:** 3\
**Last updated:** [October 11, 2017, 9:03pm UTC](https://discuss.elastic.co/t/spark-uses-one-es-node-at-a-time-to-write-to-elastic-search/102740 "2017-10-11T21:03:17Z")

</div>

I am having few clarifications with regarding Spark and ElasticSearch. ES versions used for this approach is 5.4 Config Details: 8 ES nodes with 32 shards. 12 Spark Nodes with 4 threads each. -- spark.executor.insta…

---

## [Elasticsearch: how to remove one path.data](https://discuss.elastic.co/t/elasticsearch-how-to-remove-one-path-data/98111)

<div class="topic-metadata">

**Author:** [@danielmotaleite](https://discuss.elastic.co/u/danielmotaleite)\
**Replies:** 3\
**Last updated:** [September 18, 2017, 10:29pm UTC](https://discuss.elastic.co/t/elasticsearch-how-to-remove-one-path-data/98111 "2017-09-18T22:29:02Z")

</div>

I have a elasticsearch setup that started with normal HD, but later i added 2 more SSD in the path.data Now i’m happy with the SSD and want to remove the HD. How to do it? My logic says that “transient.cluster.routing…

---

## [System.diskio.io.time == 0 on Windows](https://discuss.elastic.co/t/system-diskio-io-time-0-on-windows/85508)

<div class="topic-metadata">

**Author:** [@jarko.piironen](https://discuss.elastic.co/u/jarko.piironen)\
**Replies:** 3\
**Last updated:** [May 15, 2017, 6:12am UTC](https://discuss.elastic.co/t/system-diskio-io-time-0-on-windows/85508 "2017-05-15T06:12:19Z")

</div>

Using Metricbeat and metricset.name = diskio on a Windows Server 2012R2. On system.diskio.io.time i only get value 0 but the other values is working fine. What could be wrong? #------------------------------- Sys…

---

## [Kibana dashboard weirdness](https://discuss.elastic.co/t/kibana-dashboard-weirdness/48317)

<div class="topic-metadata">

**Author:** [@adary](https://discuss.elastic.co/u/adary)\
**Replies:** 3\
**Last updated:** [May 1, 2016, 11:37am UTC](https://discuss.elastic.co/t/kibana-dashboard-weirdness/48317 "2016-05-01T11:37:14Z")

</div>

I have a cluster with either two or three nodes with elasticsearch, logstash and kibana. ES is ok, logstash is ok, and kibana is ok as long as I don't try to programatically insert default index, visualisations and a d…

---

## [Getting lines of a log that surround an error message with kibana](https://discuss.elastic.co/t/getting-lines-of-a-log-that-surround-an-error-message-with-kibana/289368)

<div class="topic-metadata">

**Author:** [@tnibbe](https://discuss.elastic.co/u/tnibbe)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 7:41pm UTC](https://discuss.elastic.co/t/getting-lines-of-a-log-that-surround-an-error-message-with-kibana/289368 "2021-12-02T19:41:15Z")

</div>

Hello I am trying to use the ELK stack for error diagnosis with some testing output logs. I have a log structured as follows. DateTime MessageType MessageOrigin Message 2021-10-28T00:11:16…

---

## [ElasticSearch 7 APT repository - hash sum mismatch](https://discuss.elastic.co/t/elasticsearch-7-apt-repository-hash-sum-mismatch/226365)

<div class="topic-metadata">

**Author:** [@JYG\_NAOS](https://discuss.elastic.co/u/JYG_NAOS)\
**Replies:** 7\
**Last updated:** [April 28, 2020, 8:56am UTC](https://discuss.elastic.co/t/elasticsearch-7-apt-repository-hash-sum-mismatch/226365 "2020-04-28T08:56:34Z")

</div>

Hello, Since 31th March 2020, install from https://artifacts.elastic.co/packages/7.x/apt stable/main amd64 elasticsearch amd64 7.6.2 doesn't work because of hash sum mismatch. Problem is for multiple DEB packets. I te…

---

## [Column size in discover](https://discuss.elastic.co/t/column-size-in-discover/137350)

<div class="topic-metadata">

**Author:** [@Dhanashree](https://discuss.elastic.co/u/Dhanashree)\
**Replies:** 1\
**Last updated:** [June 26, 2018, 5:30pm UTC](https://discuss.elastic.co/t/column-size-in-discover/137350 "2018-06-26T17:30:44Z")

</div>

Hi, How can i change the column size in discover? Currently it is taking some fixed size irrespective of the values i want the column size to be less so that i can accomodate more columns in the screen

---

## [Discover: Request to Elasticsearch failed](https://discuss.elastic.co/t/discover-request-to-elasticsearch-failed/100604)

<div class="topic-metadata">

**Author:** [@sudi\_2611](https://discuss.elastic.co/u/sudi_2611)\
**Replies:** 1\
**Last updated:** [September 14, 2017, 9:50pm UTC](https://discuss.elastic.co/t/discover-request-to-elasticsearch-failed/100604 "2017-09-14T21:50:36Z")

</div>

I am using latest version of ELK 5.6.1 and i get the below mentioned error in discover tab in Kibana GUI Discover: Request to Elasticsearch failed: {"error":{"root\_cause":\[\],"type":"search\_phase\_execution\_exception","re…

---

## [Recommended version of Elasticsearch at this point](https://discuss.elastic.co/t/recommended-version-of-elasticsearch-at-this-point/374475)

<div class="topic-metadata">

**Author:** [@Iron](https://discuss.elastic.co/u/Iron)\
**Replies:** 4\
**Last updated:** [February 13, 2025, 1:46pm UTC](https://discuss.elastic.co/t/recommended-version-of-elasticsearch-at-this-point/374475 "2025-02-13T13:46:48Z")

</div>

I'm curious to know what the recommended version of Elasticsearch is at this point. And I want you to tell me why you recommend that version. Let's take a look at how to get an Elasticsearch update policy.

---

## [REPLACE in scripted field](https://discuss.elastic.co/t/replace-in-scripted-field/215703)

<div class="topic-metadata">

**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\
**Replies:** 2\
**Last updated:** [January 20, 2020, 2:36pm UTC](https://discuss.elastic.co/t/replace-in-scripted-field/215703 "2020-01-20T14:36:35Z")

</div>

Hello, I'm trying to convert a string into a number by extracting dots with the help of regexp. Here is the scripted field for this: if (doc\['build.keyword'\].size() != 0) { def m = /\[0-9\]+\\.\[0-9\]+\\.\[0-9\]+\\.\[0-9\]+/…

---

## [How to merge lon lat for geo\_point](https://discuss.elastic.co/t/how-to-merge-lon-lat-for-geo-point/128584)

<div class="topic-metadata">

**Author:** [@tdasch](https://discuss.elastic.co/u/tdasch)\
**Replies:** 2\
**Last updated:** [April 19, 2018, 10:54am UTC](https://discuss.elastic.co/t/how-to-merge-lon-lat-for-geo-point/128584 "2018-04-19T10:54:58Z")

</div>

ES and LS 6.2. My first post, I apologize if my formatting is incorrect in anyway. Attempting to merge lon lat for geo\_points I can visualize in Kibana. Below is my config file for LS and the error I am receiving. Of not…

---

## [Kibana did not load properly error message](https://discuss.elastic.co/t/kibana-did-not-load-properly-error-message/223648)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 6\
**Last updated:** [March 23, 2020, 12:04pm UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-error-message/223648 "2020-03-23T12:04:29Z")

</div>

hi I'm getting this screen once in a while (not every load- more like once in 20 loads) anything to do with it? thanks

---

## [Bulk Data upload in logstash](https://discuss.elastic.co/t/bulk-data-upload-in-logstash/156804)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 6\
**Last updated:** [November 21, 2018, 7:00am UTC](https://discuss.elastic.co/t/bulk-data-upload-in-logstash/156804 "2018-11-21T07:00:58Z")

</div>

Hi All, We have been trying to index data using logstash from servicenow through restapi's, we dont see any errors and data is getting indexed only issue we are facing is we do have around 2lakh records to be indexed bu…

---

## [NullPointerException when using script based sorting from Python client](https://discuss.elastic.co/t/nullpointerexception-when-using-script-based-sorting-from-python-client/21981)

<div class="topic-metadata">

**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\
**Replies:** 5\
**Last updated:** [February 7, 2015, 12:16am UTC](https://discuss.elastic.co/t/nullpointerexception-when-using-script-based-sorting-from-python-client/21981 "2015-02-07T00:16:18Z")

</div>

Hi, I am trying to use the script based sorting in my queries. This works fine when using Marvel Sense to submit the query but with the Elasticsearch python client I am getting a NullPointerException. Here is the simp…

---

## [Searching gives java.io.IOException: read past EOF](https://discuss.elastic.co/t/searching-gives-java-io-ioexception-read-past-eof/6333)

<div class="topic-metadata">

**Author:** [@Michel\_Conrad](https://discuss.elastic.co/u/Michel_Conrad)\
**Replies:** 5\
**Last updated:** [January 12, 2012, 10:23am UTC](https://discuss.elastic.co/t/searching-gives-java-io-ioexception-read-past-eof/6333 "2012-01-12T10:23:15Z")

</div>

Hi, when searching i am getting the following exception. Does this mean that the index is corrupted? I am using 1 replica, 1 shards and elasticsearch 0.17.10. I tried to optimize the index, as well and closing and re…

---

## [Metrics Filter - Trying to count and graph multiple event sources](https://discuss.elastic.co/t/metrics-filter-trying-to-count-and-graph-multiple-event-sources/43623)

<div class="topic-metadata">

**Author:** [@berglh](https://discuss.elastic.co/u/berglh)\
**Replies:** 1\
**Last updated:** [March 8, 2016, 11:18pm UTC](https://discuss.elastic.co/t/metrics-filter-trying-to-count-and-graph-multiple-event-sources/43623 "2016-03-08T23:18:31Z")

</div>

What on earth I'm trying to do I'm receiving events from lots of remote hosts, I want to produce metrics per event source. I'm pretty sure my method is flawed and looking for some help to get my on the right path for us…

---

## [Ascending order on x-axis showing the highest bucket values](https://discuss.elastic.co/t/ascending-order-on-x-axis-showing-the-highest-bucket-values/234498)

<div class="topic-metadata">

**Author:** [@loop](https://discuss.elastic.co/u/loop)\
**Replies:** 4\
**Last updated:** [May 29, 2020, 10:27am UTC](https://discuss.elastic.co/t/ascending-order-on-x-axis-showing-the-highest-bucket-values/234498 "2020-05-29T10:27:04Z")

</div>

Hi, let's say I have data like this: POST a/\_bulk {"index":{"\_id" : "1"}} {"x": 1, "y": 1} {"index":{"\_id" : "2"}} {"x": 2, "y":2 } {"index":{"\_id" : "3"}} {"x": 3, "y": 3} {"index":{"\_id" : "4"}} {"x": 4, "y":4} Now …

---

## [Help With Labelling Metrics on Kibana 4](https://discuss.elastic.co/t/help-with-labelling-metrics-on-kibana-4/26170)

<div class="topic-metadata">

**Author:** [@sugrue](https://discuss.elastic.co/u/sugrue)\
**Replies:** 4\
**Last updated:** [October 22, 2015, 2:08pm UTC](https://discuss.elastic.co/t/help-with-labelling-metrics-on-kibana-4/26170 "2015-10-22T14:08:27Z")

</div>

Hi there. I'm using the metric visualisation in a number of places as part of a dashboard. The problem is that the label just shows "Count" or the name of the aggregation. Is there any way of relabelling this, perhaps…

---

## [Dockerized Filebeat & NGINX Logs](https://discuss.elastic.co/t/dockerized-filebeat-nginx-logs/128299)

<div class="topic-metadata">

**Author:** [@Matthew\_Zeemann](https://discuss.elastic.co/u/Matthew_Zeemann)\
**Replies:** 2\
**Last updated:** [April 18, 2018, 4:16am UTC](https://discuss.elastic.co/t/dockerized-filebeat-nginx-logs/128299 "2018-04-18T04:16:17Z")

</div>

Does anyone know how to use filebeat.autodiscover with the nginx module? I have filebeat.autodiscover working with nginx, e.g. filebeat.autodiscover: providers: - type: docker templates: - condition…

---

## [Kibana 4.5 - New feature CustomLabel](https://discuss.elastic.co/t/kibana-4-5-new-feature-customlabel/45936)

<div class="topic-metadata">

**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\
**Replies:** 2\
**Last updated:** [April 1, 2016, 6:53am UTC](https://discuss.elastic.co/t/kibana-4-5-new-feature-customlabel/45936 "2016-04-01T06:53:49Z")

</div>

I seem to have a bug on the use of CustomLabel. When I put a CustomLabel on a metric, it works . But if I add a "split lines" Filters, labels disappear from the graph : And Do you know if it's possible to put a Cu…

---

## [Logstash csv output plugin problem](https://discuss.elastic.co/t/logstash-csv-output-plugin-problem/240691)

<div class="topic-metadata">

**Author:** [@kase](https://discuss.elastic.co/u/kase)\
**Replies:** 8\
**Last updated:** [July 14, 2020, 12:39am UTC](https://discuss.elastic.co/t/logstash-csv-output-plugin-problem/240691 "2020-07-14T00:39:51Z")

</div>

Hi there, I want to output elasticsearch documents to csv file with using logstash, but faced some problems... tail -f /var/log/logstash/logstash-plain.log \[2020-07-10T11:11:02,561\]\[ERROR\]\[logstash.javapipeline \]\[e…

---

## [Clarifications regarding reload configuration](https://discuss.elastic.co/t/clarifications-regarding-reload-configuration/106284)

<div class="topic-metadata">

**Author:** [@system](https://discuss.elastic.co/u/system)\
**Replies:** 8\
**Last updated:** [December 12, 2017, 1:20am UTC](https://discuss.elastic.co/t/clarifications-regarding-reload-configuration/106284 "2017-12-12T01:20:48Z")

</div>

Based on the docs You can configure Filebeat to dynamically reload prospector configuration files when there are changes. To do this, you specify a path (Glob) to watch for prospector configuration changes. When the fi…

---

## [Index alias filter evaluation](https://discuss.elastic.co/t/index-alias-filter-evaluation/65906)

<div class="topic-metadata">

**Author:** [@mrvincnezo](https://discuss.elastic.co/u/mrvincnezo)\
**Replies:** 8\
**Last updated:** [November 15, 2016, 1:26pm UTC](https://discuss.elastic.co/t/index-alias-filter-evaluation/65906 "2016-11-15T13:26:56Z")

</div>

When index alias filter is evaluated? During alias creation or on 'interaction' with the alias? Thanks.

---

## [Kibana showing "invalid Zlib data" after upgrading to 7.14](https://discuss.elastic.co/t/kibana-showing-invalid-zlib-data-after-upgrading-to-7-14/282699)

<div class="topic-metadata">

**Author:** [@lorax](https://discuss.elastic.co/u/lorax)\
**Replies:** 3\
**Last updated:** [September 10, 2021, 5:46am UTC](https://discuss.elastic.co/t/kibana-showing-invalid-zlib-data-after-upgrading-to-7-14/282699 "2021-09-10T05:46:12Z")

</div>

I have an elastic server as. an "all-in-one" with filebeat-\>Logstash-\>Elastic flow. I use Cerebro to check status. The data was visible and working well prior to upgrading to 7.14, but afterward I see Elastic is working…

---

## [ES5.4: invalid\_type\_name\_exception](https://discuss.elastic.co/t/es5-4-invalid-type-name-exception/170480)

<div class="topic-metadata">

**Author:** [@Steven\_Gerrits](https://discuss.elastic.co/u/Steven_Gerrits)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 11:15am UTC](https://discuss.elastic.co/t/es5-4-invalid-type-name-exception/170480 "2019-03-01T11:15:26Z")

</div>

I'm running ElasticSearch 5.4 on Laravel 5.5 When i run php artisan elastic:index to index the indices I get following error: \[In Connection.php line 610: {"error":{"root\_cause":\[{"type":"invalid\_type\_name\_exception…

---

## [Regexp in dynamic templates](https://discuss.elastic.co/t/regexp-in-dynamic-templates/157403)

<div class="topic-metadata">

**Author:** [@gerilya](https://discuss.elastic.co/u/gerilya)\
**Replies:** 3\
**Last updated:** [November 22, 2018, 11:48am UTC](https://discuss.elastic.co/t/regexp-in-dynamic-templates/157403 "2018-11-22T11:48:33Z")

</div>

Hello, I would like to create dynamic mapping so that all strings matching IP address pattern are mapped to IP type and all other strings are mapped to keyword/text. I've tried the following index template, but it does…

---

## [Service status visualization in kibana](https://discuss.elastic.co/t/service-status-visualization-in-kibana/147707)

<div class="topic-metadata">

**Author:** [@vaishno.avi](https://discuss.elastic.co/u/vaishno.avi)\
**Replies:** 3\
**Last updated:** [September 7, 2018, 4:29pm UTC](https://discuss.elastic.co/t/service-status-visualization-in-kibana/147707 "2018-09-07T16:29:03Z")

</div>

Hello, I am looking for a way to have the service status visualize into a green/red status based on its availability. This would be similar to which is under monitoring tab of the elk nodes Regards Ashish

---

## [Getting Timeouts from elasticsearch](https://discuss.elastic.co/t/getting-timeouts-from-elasticsearch/101639)

<div class="topic-metadata">

**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\
**Replies:** 3\
**Last updated:** [September 25, 2017, 7:08am UTC](https://discuss.elastic.co/t/getting-timeouts-from-elasticsearch/101639 "2017-09-25T07:08:54Z")

</div>

Hi Team, All of our Nodes are Up and Green in state. But we are getting below timeout errors in log and all indeces and search actions are too slow in Kibana. We are using ELK Version 5.0.2. \[2017-09-24T22:35:05,709\]\[…

---

## [ES fails to start when using 64 bit java](https://discuss.elastic.co/t/es-fails-to-start-when-using-64-bit-java/11507)

<div class="topic-metadata">

**Author:** [@ryan\_melissari](https://discuss.elastic.co/u/ryan_melissari)\
**Replies:** 3\
**Last updated:** [April 9, 2013, 2:45pm UTC](https://discuss.elastic.co/t/es-fails-to-start-when-using-64-bit-java/11507 "2013-04-09T14:45:07Z")

</div>

I have been using ES for a few months now without many problems. I have started running curl search commands that could be considered heavy which causes the cpu and memory usage to spike. ES consumes the 3gigs of m…

---

## [Event tracking for improving conversion rate](https://discuss.elastic.co/t/event-tracking-for-improving-conversion-rate/303274)

<div class="topic-metadata">

**Author:** [@yukai](https://discuss.elastic.co/u/yukai)\
**Replies:** 2\
**Last updated:** [May 6, 2022, 7:11am UTC](https://discuss.elastic.co/t/event-tracking-for-improving-conversion-rate/303274 "2022-05-06T07:11:18Z")

</div>

We built a video search platform powered by Elasticsearch. Which consists of a search bar (of course) and many interesting functions like video recommendation, search histories, video comments and so on. Which confuses…

---

## [User.name field for event ID 4104](https://discuss.elastic.co/t/user-name-field-for-event-id-4104/229296)

<div class="topic-metadata">

**Author:** [@\_finack](https://discuss.elastic.co/u/_finack)\
**Replies:** 1\
**Last updated:** [April 22, 2020, 4:06pm UTC](https://discuss.elastic.co/t/user-name-field-for-event-id-4104/229296 "2020-04-22T16:06:08Z")

</div>

I want event ID 4104 (PowerShell scriptblock logging) to populate the username in the user.name field. What is the best way to get the username to populate into the user.name field in Elasticsearch? Event IDs 4688 and 1…

---

## [Elastic Search Beat](https://discuss.elastic.co/t/elastic-search-beat/47427)

<div class="topic-metadata">

**Author:** [@GSL10019](https://discuss.elastic.co/u/GSL10019)\
**Replies:** 7\
**Last updated:** [April 18, 2016, 5:35pm UTC](https://discuss.elastic.co/t/elastic-search-beat/47427 "2016-04-18T17:35:02Z")

</div>

I was wondering how to customize the beats that are already available and how to direct the logs and what extremes can we customize the beats?

---

## [Headers in CSV File](https://discuss.elastic.co/t/headers-in-csv-file/161420)

<div class="topic-metadata">

**Author:** [@kb2295](https://discuss.elastic.co/u/kb2295)\
**Replies:** 6\
**Last updated:** [December 19, 2018, 7:04pm UTC](https://discuss.elastic.co/t/headers-in-csv-file/161420 "2018-12-19T19:04:26Z")

</div>

Hello. How can I get ELK to ignore the first line in my CSV file (the headers). I keep getting the error: \[2018-12-18T16:43:18,640\]\[WARN \]\[logstash.outputs.elasticsearch\] Failed action. {:status=\>400, :action=\>\["index…

---

## [Confusion about the plugin about logstash-input-exec and logstash-output-tcp](https://discuss.elastic.co/t/confusion-about-the-plugin-about-logstash-input-exec-and-logstash-output-tcp/75466)

<div class="topic-metadata">

**Author:** [@intelyu0921](https://discuss.elastic.co/u/intelyu0921)\
**Replies:** 6\
**Last updated:** [February 21, 2017, 2:51am UTC](https://discuss.elastic.co/t/confusion-about-the-plugin-about-logstash-input-exec-and-logstash-output-tcp/75466 "2017-02-21T02:51:19Z")

</div>

As most friends in our forum, I am also a newbie about our ELK stack. Here I get the Logstash 2.4.0 environment, then I receive the request: we want to collect contents of the file /home/yhh/VMState.3 and empty the file …

---

## [Fiabilité de logstash en charge?](https://discuss.elastic.co/t/fiabilite-de-logstash-en-charge/41392)

<div class="topic-metadata">

**Author:** [@C\_H](https://discuss.elastic.co/u/C_H)\
**Replies:** 6\
**Last updated:** [February 11, 2016, 6:50pm UTC](https://discuss.elastic.co/t/fiabilite-de-logstash-en-charge/41392 "2016-02-11T18:50:13Z")

</div>

Bonjour, un peu trop souvent, logstash n'arrive pas à traiter convenablement ce qu'il reçoit en entrée, et ainsi fausse les résultats dans elastic. Par exemple, je lui donne ceci : root@s00vl9925220:/apps/toolboxes/b…

---

## [Authentication working with username/password but not with API key](https://discuss.elastic.co/t/authentication-working-with-username-password-but-not-with-api-key/280108)

<div class="topic-metadata">

**Author:** [@abhinavkulkarni](https://discuss.elastic.co/u/abhinavkulkarni)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 3:14pm UTC](https://discuss.elastic.co/t/authentication-working-with-username-password-but-not-with-api-key/280108 "2021-08-04T15:14:00Z")

</div>

Hi, I have set up a self-managed 3-node Elasticsearch cluster on Kubernetes using instructions here. I haven't yet added any extra bells and whistles, but pretty much used the YAML in the link. I am able to cURL for va…

---

## [I only see metricbeat container as host](https://discuss.elastic.co/t/i-only-see-metricbeat-container-as-host/80025)

<div class="topic-metadata">

**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\
**Replies:** 2\
**Last updated:** [March 27, 2017, 11:43am UTC](https://discuss.elastic.co/t/i-only-see-metricbeat-container-as-host/80025 "2017-03-27T11:43:35Z")

</div>

Hi, I am using metricbeat inside a container and want this beat to monitor the host and all other neighboring containers. Unfortunately I can only see my metricbeat docker as host in most of the dashboards views. Bu…

---

## [Proper buckets\_path value for a Filters Aggregation?](https://discuss.elastic.co/t/proper-buckets-path-value-for-a-filters-aggregation/57754)

<div class="topic-metadata">

**Author:** [@nfantone](https://discuss.elastic.co/u/nfantone)\
**Replies:** 2\
**Last updated:** [August 11, 2016, 3:59pm UTC](https://discuss.elastic.co/t/proper-buckets-path-value-for-a-filters-aggregation/57754 "2016-08-11T15:59:16Z")

</div>

Hi everyone! I'm struggling with generating a query that fits the following scenario: A single index with two types: purchase and search. Given a multi-bucket metric (say, histogram), calculate for each bucket the r…

---

## [KIBANA geoip configuration and map](https://discuss.elastic.co/t/kibana-geoip-configuration-and-map/301310)

<div class="topic-metadata">

**Author:** [@Arraso26](https://discuss.elastic.co/u/Arraso26)\
**Replies:** 4\
**Last updated:** [April 6, 2022, 5:26am UTC](https://discuss.elastic.co/t/kibana-geoip-configuration-and-map/301310 "2022-04-06T05:26:19Z")

</div>

Good, I'm trying to visualise where the ips of the apache logs that I receive come from, but when I click on the map I get the message that I don't have the index pattern, any idea? input { beats { port =\> 5044 …

---

## [How to access the documents that is retrieved from the search aggregation nest bucket](https://discuss.elastic.co/t/how-to-access-the-documents-that-is-retrieved-from-the-search-aggregation-nest-bucket/76914)

<div class="topic-metadata">

**Author:** [@nilanjana](https://discuss.elastic.co/u/nilanjana)\
**Replies:** 3\
**Last updated:** [March 3, 2017, 9:36am UTC](https://discuss.elastic.co/t/how-to-access-the-documents-that-is-retrieved-from-the-search-aggregation-nest-bucket/76914 "2017-03-03T09:36:29Z")

</div>

I have a query like this - var result = clientConnection.Search\<dynamic\>(s =\> s .Index(indexname) .Type(typename) .Aggregations(a =\> a .DateRange(fieldvalue, d =\> d .Field(fieldname) .Ranges…

---

## [Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused/76384)

<div class="topic-metadata">

**Author:** [@lvctao](https://discuss.elastic.co/u/lvctao)\
**Replies:** 3\
**Last updated:** [February 25, 2017, 7:19am UTC](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused/76384 "2017-02-25T07:19:58Z")

</div>

when I bulk import data into elastic, the problem always occurred: The bulk comand I used is: The total amount of my data is 42G and I split it into 4000 files, the size of each file is about 15M: My disk space …

---

## [Using DNS to define master list in discovery.zen.ping.unicast.hosts](https://discuss.elastic.co/t/using-dns-to-define-master-list-in-discovery-zen-ping-unicast-hosts/63927)

<div class="topic-metadata">

**Author:** [@Jaren](https://discuss.elastic.co/u/Jaren)\
**Replies:** 3\
**Last updated:** [October 27, 2016, 3:02am UTC](https://discuss.elastic.co/t/using-dns-to-define-master-list-in-discovery-zen-ping-unicast-hosts/63927 "2016-10-27T03:02:38Z")

</div>

I am using elasticsearch 2.3.4. In the past we have explicitly provided the IP's in discovery.zen.ping.unicast.hosts. This isn't idea because when I am upgrading clusters, I now have to remember to update the static lis…

---

## [Json codec crashing logstash](https://discuss.elastic.co/t/json-codec-crashing-logstash/33680)

<div class="topic-metadata">

**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\
**Replies:** 3\
**Last updated:** [December 23, 2015, 12:48pm UTC](https://discuss.elastic.co/t/json-codec-crashing-logstash/33680 "2015-12-23T12:48:32Z")

</div>

I have courier input feeding the pipeline. When i try using the tcp output using codec =\> json or codec =\> json\_lines, logstash crashes and spits this error -- LogStash::Json::GeneratorError: Failed to load class 'org…

---

## [A graceful way to update/upgrade/restart](https://discuss.elastic.co/t/a-graceful-way-to-update-upgrade-restart/10971)

<div class="topic-metadata">

**Author:** [@sr\_ix](https://discuss.elastic.co/u/sr_ix)\
**Replies:** 3\
**Last updated:** [May 18, 2013, 4:49am UTC](https://discuss.elastic.co/t/a-graceful-way-to-update-upgrade-restart/10971 "2013-05-18T04:49:31Z")

</div>

I wish to automate my (minor) upgrade/restart scripts for my ES cluster. I know that this is only applicable for upgrades like going from 0.20.4 to 0.20.5 and I have read through DrTech's excellent poston this exact t…

---

## [Search results show field values that search does not find](https://discuss.elastic.co/t/search-results-show-field-values-that-search-does-not-find/80626)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 1\
**Last updated:** [March 30, 2017, 2:24pm UTC](https://discuss.elastic.co/t/search-results-show-field-values-that-search-does-not-find/80626 "2017-03-30T14:24:14Z")

</div>

Sounds nonsensical, but I can give an example and explain why it happens. Example Suppose that both of the following conditions are true: On the Kibana Discover page, a table of search results shows the value 3.142 …

---

## [Doing mathematical ops using logstash filters](https://discuss.elastic.co/t/doing-mathematical-ops-using-logstash-filters/30058)

<div class="topic-metadata">

**Author:** [@Udai\_Mehra](https://discuss.elastic.co/u/Udai_Mehra)\
**Replies:** 1\
**Last updated:** [September 26, 2015, 10:50am UTC](https://discuss.elastic.co/t/doing-mathematical-ops-using-logstash-filters/30058 "2015-09-26T10:50:20Z")

</div>

Hi, I am facing a weired issue and need help of experts. I am trying to do numerical (INT) comparison in logstash filter file. Basically, I want to register only the haproxy events ( from its log file ) which take above …

---

## [ORA-01861 : literal does not match format string](https://discuss.elastic.co/t/ora-01861-literal-does-not-match-format-string/144263)

<div class="topic-metadata">

**Author:** [@seungtae](https://discuss.elastic.co/u/seungtae)\
**Replies:** 8\
**Last updated:** [August 14, 2018, 1:35am UTC](https://discuss.elastic.co/t/ora-01861-literal-does-not-match-format-string/144263 "2018-08-14T01:35:59Z")

</div>

Hello everyone. I want to convert string to date. My config, I use jdbc output plugin. jdbc { ... statement =\> \["INSERT INTO TB\_REN016\_020 (GATH\_DTM) VALUES(…

---

## [Elasticsearch starts then stops](https://discuss.elastic.co/t/elasticsearch-starts-then-stops/139004)

<div class="topic-metadata">

**Author:** [@jb1462](https://discuss.elastic.co/u/jb1462)\
**Replies:** 2\
**Last updated:** [July 7, 2018, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-starts-then-stops/139004 "2018-07-07T11:10:26Z")

</div>

Hello, I have installed elasticsearch (elasticsearch-2.3.3-1) and kibana (kibana-4.5.1) on one of our VMs ( with RHEL 7.5). Kibana starts without any issue. However, elasticsearch starts and then dies. Here's what I…

---

## [Iframe to graph](https://discuss.elastic.co/t/iframe-to-graph/83089)

<div class="topic-metadata">

**Author:** [@elboim](https://discuss.elastic.co/u/elboim)\
**Replies:** 2\
**Last updated:** [April 20, 2017, 6:12pm UTC](https://discuss.elastic.co/t/iframe-to-graph/83089 "2017-04-20T18:12:39Z")

</div>

Hi I want to show my graph in my website, so I saved the graph to a workspace and then I copy the URI of the worksapce and put as iframe in the website: " src="http://localhost:9876/app/graph#/workspace/9b7a48f0-25cf-1…

---

## [Access Control Exception - openjdk 9](https://discuss.elastic.co/t/access-control-exception-openjdk-9/67971)

<div class="topic-metadata">

**Author:** [@william00179](https://discuss.elastic.co/u/william00179)\
**Replies:** 2\
**Last updated:** [December 5, 2016, 12:47pm UTC](https://discuss.elastic.co/t/access-control-exception-openjdk-9/67971 "2016-12-05T12:47:27Z")

</div>

I am trying to install Elasticsearch on a new install of Ubuntu 16.04 with openjdk 9 installed. I have installed the newest version of Elasticsearch from the deb available on the website. Installed with sudo dpkg -i .... …

[Previous page](https://discuss.elastic.co/top.md?page=874&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=876&per_page=50&period=all)
